All eggs in one basket? 44% of enterprises have a security team within their wider IT department

Yet, improving internal specialists’ expertise was listed as the second most important reason to increase the IT security budget over the coming years.

Businesses, and large enterprises in particular, require skilled professionals to protect from ever-evolving cyberattacks. Combining IT and security functions within a single department can be convenient and speed up many processes to this end. However, this approach also contradicts the segregation of duties principle, as the same people would be responsible for both day-to-day IT initiatives as well as the evaluation of corresponding security risks. Kaspersky’s recent report on IT security economics looks into this conflict of approaches and unveils what today’s typical IT security department looks like.

Respondents were asked if their companies employ highly specialized units within a cybersecurity department. In addition to SOC, 16% said that they have dedicated threat intelligence teams and 14% employ a dedicated malware analysis team.

Despite the share of such dedicated units seeming quite small, the majority of organizations are ready to mitigate this by assigning budget to upskill their IT security staff. More broadly, 71% of all businesses expect that their investments into IT will grow in the next three years. Among them, 41% of enterprises are driven by a desire to improve internal specialists’ expertise, making it the second most common reason to increase the IT security budget.

In order to address multiple organizational setups and different priorities or strategies, Kaspersky has split its B2B offering into frameworks based on customers’ IT security maturity – Kaspersky Security Foundations, Kaspersky Optimum Security and Expert Security. The recently launched Kaspersky MDR powers each framework, enabling an instant IT security function while allowing more mature IT security teams to focus on the most critical incidents.

“The survey results show that enterprise cybersecurity departments may come in many forms. It means that their needs and requirements also vary. With our framework approach we not only help customers to protect against cyberattacks based on their current capabilities, and irrespective of business size, but we outline how they can strengthen their internal security expertise further looking forward,” comments Sergey Martsynkyan, Head of B2B Product Marketing at Kaspersky.

Kaspersky Optimum Security framework enhances security against new, unknown and evasive threats by helping medium-sized businesses and smaller enterprises with limited cybersecurity resources to build incident response. Kaspersky Expert Security framework represents a holistic strategy to help equip, inform and guide in-house experts to face the full spectrum of today’s complex threats, APT-like and targeted attacks. More information about the frameworks is available on the official web page .

The full report is available via this link.

About the survey

The Kaspersky Global Corporate IT Security Risks Survey (ITSRS) interviewed a total of 5,266 IT business decision-makers across 31 countries in June 2020. Respondents were asked about the state of IT security within their organizations, the types of threats they face and the costs they have to deal with when recovering from attacks.

About Kaspersky

Kaspersky is a global cybersecurity company founded in 1997. Kaspersky’s deep threat intelligence and security expertise is constantly transforming into innovative security solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe. The company’s comprehensive security portfolio includes leading endpoint protection and a number of specialized security solutions and services to fight sophisticated and evolving digital threats. Over 400 million users are protected by Kaspersky technologies and we help 250,000 corporate clients protect what matters most to them. Learn more at www.kaspersky.com.